CLEANSTART-2026-CS02869 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, ghsa-p77j-4mvh-x3m3 applied in versions: 2.18.0-r0, 2.18.0-r1, 2.18.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OH47925 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810 applied in versions: 4.13.0-r0, 4.13.0-r1, 4.13.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

RHCOS 3 : OpenShift Container Platform 3.11 openshift-external-storage (RHSA-2019:4054)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4054 advisory. - kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation CVE-2019-11255...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, crane, kargo, net-kourier, sbom-convert, postgres-operator, weaviate, smarter-device-manager, container-object-storage-interface, cluster-autoscaler, tigera-operator, hugo-extended, aws-application-networking-k8s, rancher-webhook, cilium,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: authservice, policy-controller, gcsfuse, swagger, cortex, knative-eventing, kaf, kargo, kube-state-metrics, kubernetes-dashboard-auth, aws-flb-firehose, lazydocker, spire-server, falco-exporter, docker-machine-driver-harvester, terraform-provider-azapi, net-kourier,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: k8s-metacollector-fips, crossplane-provider-aws-cognitoidentity-fips, kyverno-policy-reporter-plugins-trivy-fips, helm-diff-fips, crossplane-provider-aws-s3-fips, scorecard, contour, victoriametrics-operator-fips, custom-pod-autoscaler, terraform-fips, coredns, s5cmd...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, cortex, knative-eventing, tailscale, terraform-provider-google, kube-state-metrics, lazydocker, juicefs, spire-server, docker-compose, docker-machine-driver-harvester, rke2-cloud-provider, net-kourier, kserve-modelmesh-serving,...

CLEANSTART-2026-LC01167 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.4.0-r1, 8.4.0-r2

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WM95952 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZR49276 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.18.0-r0

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, authservice, swagger, cortex, knative-eventing, kaf, kubernetes-dashboard-auth, kube-state-metrics, terraform-provider-google, terraform-provider-azapi, docker-compose, spicedb, net-kourier, kserve-modelmesh-serving,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, authservice, swagger, cortex, knative-eventing, kaf, kubernetes-dashboard-auth, kube-state-metrics, terraform-provider-google, terraform-provider-azapi, docker-compose, spicedb, net-kourier, kserve-modelmesh-serving,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: authservice, cortex, crane, nri-kubernetes, net-kourier, cloudflared, sbom-convert, postgres-operator, smarter-device-manager, container-object-storage-interface, cluster-autoscaler, tigera-operator, aws-application-networking-k8s, rancher-webhook, cilium, trino,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: authservice, cortex, crane, nri-kubernetes, net-kourier, cloudflared, sbom-convert, postgres-operator, smarter-device-manager, container-object-storage-interface, cluster-autoscaler, tigera-operator, aws-application-networking-k8s, rancher-webhook, cilium, trino,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: k8s-metacollector-fips, helm-diff-fips, crossplane-provider-aws-s3-fips, contour, terraform-fips, coredns, crossplane-provider-gcp-fips, sftpgo-plugin-auth, terraform-provider-sendgrid, eck-operator-fips, nvidia-container-toolkit, kong-ingress-controller,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: spire-server-fips, scorecard, terraform-fips, coredns, crossplane-provider-gcp-fips, eck-operator-fips, kong-ingress-controller, minio, ceph-csi-operator, flyte, sops, azcopy-fips, skaffold-fips, buildkitd, helm-operator-fips, ratify-fips, temporal-fips, blob-csi-fip...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, crane, kargo, postgres-operator, container-object-storage-interface, cluster-autoscaler, tigera-operator, k6, aws-application-networking-k8s, rancher-webhook, cilium, trino, kserve-rest-proxy, timoni, atlantis, kube-logging-operator, gh,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, flannel-cni-plugin, crane, kargo, sbom-convert, postgres-operator, age, smarter-device-manager, container-object-storage-interface, cluster-autoscaler, tigera-operator, k6, aws-application-networking-k8s, rancher-webhook, cilium, trino,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, flannel-cni-plugin, crane, kargo, sbom-convert, postgres-operator, age, smarter-device-manager, container-object-storage-interface, cluster-autoscaler, tigera-operator, k6, aws-application-networking-k8s, rancher-webhook, cilium, trino,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, authservice, aws-privateca-issuer, policy-controller, swagger, cortex, kubelet-csr-approver, juicefs, spire-server, kserve-modelmesh-serving, spire-controller-manager, crossplane-provider-sql, sbom-convert, whereabouts,...